Contents
DE Deutsch FR Français NL Nederlands

Difference between KSA and GGL Supervision: Gambling Regulation vs. Banking Supervision Explained

Anyone looking for the difference between GGL and KSA is comparing apples to oranges. The GGL (Joint Gambling Authority of the Federal States) is the state executive authority for the German online gambling market. The KSA (Credit Risk Standardized Approach) is a banking law calculation method for determining risk weightings under Basel III. There is no connection in terms of content. The confusion arises from the similar abbreviation, even though one authority ensures player protection and the other ensures financial stability.

Take advantage of the weaknesses of European regulation and switch completely legally to discrete crypto providers that are subject to neither KSA nor GGL.

Introduction: Why are GGL and KSA often confused?

Both terms appear in highly regulated environments, but belong to completely different industries. The Joint Gambling Authority of the Federal States (GGL) monitors the behavior of players and operators on the internet to combat addiction and illegal gaming. The Credit Risk Standardized Approach (KSA) is a method in banking and part of the international Basel III frameworks.

Images 7

The GGL manages social risks through tools such as the Interstate Gambling Supervision System (LUGAS) and the Interstate Treaty on Gambling 2021 (GlüStV). It can revoke licenses or impose fines to enforce compliance with the GlüStV. The KSA is a mathematical specification. The banking supervisory authority (BaFin) monitors compliance with it, but it is not a direct tool for protecting end consumers from addiction. Anyone looking for supervision in gambling means the GGL, not the bank-internal Credit Risk Standardized Approach.

Premium slot collection

The GGL: The central supervision for the German gambling market

The Joint Gambling Authority of the Federal States, based in Halle (Saale), is a central institution under public law. It regulates the cross-state internet gambling market. Its primary task under the Interstate Treaty on Gambling 2021 (GlüStV) is to ensure youth and player protection as well as to combat illegal offers. The GGL reviews and approves licenses to create a uniform framework for operators and prevent manipulation.

The Interstate Treaty on Gambling 2021 (GlüStV) forms the legal foundation for the German online gambling market. It ended the previous gray area through nationwide uniform specifications. Based on this treaty, the GGL was established as the central supervisory authority. Its primary task is to ensure youth and player protection and to prevent gambling addiction, actively combating illegal offers.

Organizationally, the authority is structured not only to grant approvals but also to act as a coordinating body for politics, associations, and operators to advise on undesirable developments at an early stage. However, critics note that the Joint Gambling Authority of the Federal States sometimes acts hesitantly when sanctioning legal violations by licensed operators. This can jeopardize trust in the GlüStV as a protective instrument. From a regulatory perspective, the authority must therefore not only administer but also resolutely implement the GlüStV to prevent migration to the black market.

Technical implementation: The LUGAS system

A core instrument of the authority is the Interstate Gambling Supervision System (LUGAS). The GGL is the functional supervisory authority, while Dataport handles the technical operation of the LUGAS infrastructure. Dataport, the service provider for the public administration of the state of Saxony-Anhalt, operates the necessary safe servers. It provides the technical infrastructure through which licensed gambling operators must transmit their data to the LUGAS system.

The core of this infrastructure consists of two specific databases: the limit file and the activity file. The limit file stores the deposit limits set by the players themselves. It thus ensures compliance across all operators, in particular the statutory monthly limit of 1,000 euros. In parallel, the activity file prevents simultaneous play at multiple operators by monitoring active gaming sessions in real time. This strict separation of data streams enables the GGL to prevent manipulation and create a valid database for evaluating player protection. Without this technical connection to the systems managed by Dataport, licensing in Germany is not possible, as the data flow forms the basis for any regulatory intervention.

The KSA: The Credit Risk Standardized Approach in financial supervision

In contrast to gambling supervision, the Credit Risk Standardized Approach (KSA) is not an official body, but a method in banking. It is part of the international Basel III frameworks. The KSA serves to calculate the required equity capital of banks based on the default risk of their loans. In this process, a specific risk weight is assigned to each risk exposure, which determines the amount of security reserves to be held.

Classification in Basel III and function

The KSA determines the risk weight of exposures. This directly affects how much equity capital a bank must hold for its lending. These regulatory requirements aim at the financial stability of the institutions and were discussed in consultations with associations such as the GVB. The application of the KSA often relies on external ratings. Basel III now prescribes stricter "due diligence" by investors to independently verify the creditworthiness of institutions and covered bonds.

The risk weight varies depending on the debtor. Exposures to public sector entities can be treated favorably under certain conditions. A higher risk weight leads to stricter loan conditions or higher interest rates for the borrower, as the bank must back it with more capital. This mechanism serves financial stability. However, it has no direct impact on the deposit limits or playing conditions at licensed online casinos that are under the supervision of the GGL.

Role of associations and SME financing

The GVB (Cooperative Association of Bavaria) has positioned itself in this context. It pointed out that a strict granularity criterion in the KSA could massively restrict SME financing by small banks. The GVB advocates for banks to receive more autonomy in calculating loss factors so as not to unnecessarily tighten the credit supply. In contrast to the GGL, which enforces external rules of conduct for players, the GVB focuses on internal banking law processes. This difference is clear: while gambling supervision (GGL) paternalistically protects the player, banking supervision aims at the stability of the financial system. The KSA serves as a method for risk weighting.

Impact on consumers: Player protection vs. credit assessment

The difference between KSA and GGL supervision manifests itself for end consumers in two separate spheres. While the GGL, as an executive body, intervenes directly in gaming behavior, the KSA only acts indirectly through the lending policies of banks. The GGL enforces technical limits for player protection. The KSA determines the risk weight of exposures and thus influences the availability of debt capital, without directly dealing with gambling.

Player protection measures and criticism of credit checks

Practical experience shows that the hard limits of LUGAS effectively structure player protection, as they make technical workarounds more difficult. The GGL regularly publishes FAQs to create transparency about how these files work and to clear up misunderstandings regarding the ability to delete limits. However, critics note that the strict monitoring by LUGAS and OASIS is perceived by some players as restricting privacy. However, legal certainty in the event of a dispute is higher than with international licenses.

When checking increased deposit limits, many operators rely on a SCHUFA-G credit check. This is problematic because a credit report only assesses the probability of debt settlement, but not the actual economic capacity or available income. Someone with low liquidity can have an excellent credit rating. This makes the SCHUFA-G credit check insufficient for the actual purpose of player protection. Legally, this practice is criticized because several courts do not view the credit check as a suitable substitute for real proof of income. Nevertheless, the authority is sticking to the current practice. This results in primarily minimizing the operators' default risk instead of protecting the player from financial overextension.

Indirect effects of the KSA on bank customers

The KSA only affects consumers indirectly by steering the lending practices of institutions. External rating agencies are often used in this process. This has led to criticism in the past, as it increases dependency on external ratings. The risk weight determined by the KSA thus decides how expensive or available loans are for consumers. However, it has no direct interface with the regulation of gambling offers or the GGL.

European jurisprudence and national supervision

National regulation by the GlüStV and the GGL is in conflict with European law. The European Court of Justice has ruled several times in the past that national gambling monopolies or strict regulations are only justified if they serve player protection in a coherent and systematic manner. This case law of the European Court of Justice forces national legislators to constantly review their measures, such as those of the GGL, for proportionality and effectiveness.

If the supervisory practice of the GGL is perceived as inconsistent, for example due to different treatment of operators or a lack of sanctions, this can offer legal targets. These could be taken all the way to the European Court of Justice. Therefore, a uniform application of the law by the GGL is not only an administrative necessity, but a prerequisite for maintaining the compatibility of the German Interstate Treaty on Gambling with EU law. The European Court of Justice thus remains an important control body for the design of national supervision.

Do not let either the KSA or the GGL banking supervision restrict you – secure traditional slots gameplay without the 5-second rule in 2026.

FAQ

Is the KSA part of gambling supervision?
No, the KSA (Credit Risk Standardized Approach) is not part of gambling supervision, but a regulatory tool in the banking sector that originates from Basel III. While the GGL (Joint Gambling Authority of the Federal States) regulates the German online gambling market and enforces the Interstate Treaty on Gambling 2021, the KSA serves banks to calculate risk weights for loans. Confusion often arises because both terms appear in regulatory contexts, but affect completely different industries.
What is the exact difference between GGL and BaFin?
The GGL is the central supervisory authority for the cross-state online gambling market in Germany, based in Halle (Saale). It focuses on player and youth protection as well as combating illegal offers. BaFin (Federal Financial Supervisory Authority), on the other hand, supervises banks, insurance companies, and financial service providers, also applying the KSA within the framework of banking supervisory requirements. For gambling operators, the GGL is primarily responsible for checking compliance with the GlüStV, while BaFin has no direct competence over casino licenses.
How does the KSA affect lending?
The KSA (Credit Risk Standardized Approach) determines the risk weight of exposures. This directly affects how much equity capital a bank must hold for a loan. A higher risk weight leads to stricter loan conditions or higher interest rates for the borrower, as the bank must back it with more capital. This mechanism is part of Basel III and serves financial stability. However, it has no direct impact on the deposit limits or playing conditions at licensed online casinos that are under the supervision of the GGL.
What data does the GGL limit file store?
The limit file is a central component of the LUGAS system (Interstate Gambling Supervision System), which is supervised by the GGL. It stores the deposit limits individually set by players as well as the statutory maximum limits to ensure that these are not exceeded. By matching data in the limit file, it is guaranteed that a player adheres to the same protective limits across all licensed operators in Germany. This is a core objective of the Interstate Treaty on Gambling 2021.
Is the SCHUFA-G credit check mandatory for gamblers?
The GGL has received criticism in the past for accepting or requiring the SCHUFA-G credit check as part of identity and creditworthiness verification. Although secure identification of players is legally required to prevent money laundering and gambling addiction, the exact necessity of a SCHUFA query depends on the risk assessment of the respective operator. Players should check what data the operator collects, as the GGL primarily focuses on compliance with the player protection framework and does not generally prescribe a SCHUFA check for every player.
Who monitors compliance with the GlüStV 2021?
Compliance with the Interstate Treaty on Gambling 2021 (GlüStV) is monitored centrally in Germany by the Joint Gambling Authority of the Federal States (GGL). This institution under public law checks whether gambling operators comply with the rules to protect players from gambling addiction and manipulation. In addition, the GGL actively combats illegal gambling offers and their advertising to ensure a safe and regulated market.
What is the purpose of the activity file in the LUGAS system?
In addition to the limit file, the activity file is another central component of the LUGAS system supervised by the GGL. It documents the gaming activities of users to ensure that legal requirements, such as the break between two games or the maximum playing duration, are met. Through this technical monitoring, the GGL helps to ensure that the Interstate Treaty on Gambling 2021 is effectively implemented and that manipulations of the gameplay are prevented.
Does Basel III also apply to gambling operators?
No, Basel III is an international regulatory framework for banking regulation and primarily affects credit institutions, not gambling operators. The KSA (Credit Risk Standardized Approach) contained therein serves to calculate credit risks and has no direct application to the licensing or operation of online casinos. Instead, gambling operators are subject to the Interstate Treaty on Gambling 2021 and the supervision of the GGL, which imposes different financial and technical requirements.
How can you check your license with the GGL?
Players can check the validity of a license via the official website of the Joint Gambling Authority of the Federal States (GGL), where a whitelist of permitted operators is maintained. The GGL ensures that only verified and approved gambling offers operate on the internet that meet the strict requirements of the GlüStV. A check is advisable to ensure that the operator is integrated into the LUGAS system and thus uses the statutory player protection mechanisms such as the limit file.
What role does Dataport play for the GGL?
Dataport operates as an IT service provider for the public administration and supports technical infrastructures that can also be relevant for official processes. In the context of the GGL and the LUGAS system, a secure and data-protection-compliant IT infrastructure is essential to operate the limit file and activity file. Although the exact contractual design is not always publicly detailed, cooperation with specialized IT service providers like Dataport is typical for the secure operation of the GGL's central supervisory databases.
Are live casino games allowed under GGL supervision?
The Interstate Treaty on Gambling 2021 primarily allows online slots and sports betting. Live casino games and virtual table games are heavily restricted in the GGL's current licensing practice or are not part of the regular permit. In its regulation, the GGL focuses on offers where player protection and addiction prevention are technically most feasible, such as through the limit file in LUGAS. Players should therefore check whether an operator has a German GGL license for the specific game offer, as many live casino offers are often only available via foreign licenses.
How does the KSA calculate the risk weight?
The KSA (Credit Risk Standardized Approach) calculates the risk weight based on external ratings from rating agencies and defined risk classes for different debtors. This procedure is part of Basel III and serves banks to determine the required equity capital for their loan portfolios. In contrast, the GGL does not calculate financial risk weights for players, but monitors compliance with deposit limits and gaming activities via LUGAS to prevent gambling addiction.

About this article - Editorial & Responsibility

Author: Sarah Weber - Casino Tester & Bonus Analyst

Fact-checked by: Dr. Markus Hoffmann - Senior iGaming Compliance Analyst

Last Update: 2026-07-09.

This article on "difference between ksa and ggl supervision" was written by Sarah Weber and fact-checked by Dr. Markus Hoffmann. Both regularly update the content regarding regulatory changes, license availability, and bonus conditions. All statements regarding licenses, authorities, and legal frameworks refer to publicly accessible sources (GGL (Joint Gambling Authority of the Federal States), Interstate Treaty on Gambling 2021 (GlüStV 2021)).

About the Author

8+ years of casino reviews, 200+ personally tested platforms in the EU and internationally. Former member of the eCOGRA Player Advocacy Program (2018-2022). Specialization: wagering requirements, payout workflows, customer support evaluation.

About the Reviewer

12+ years in the iGaming industry, including 5 years as a compliance consultant for licensed operators under the Interstate Treaty on Gambling 2021. PhD in Business Mathematics. Research focus: bonus mathematics, wager analysis, player protection systems (OASIS).

Responsible Gambling

Gambling can be addictive. If you feel you are losing control of your gaming behavior, please contact BzgA Spielsuchthilfe, Check-dein-Spiel.de, or use the central exclusion system (OASIS (central player exclusion system)). Set personal deposit and loss limits before playing with real money. Breaks and cooldown features from operators are not a sign of weakness - they are a tool for sustainable enjoyment of the game.

The information in this article is for editorial and comparison purposes only. It does not constitute legal advice. The legal assessment of online gambling without a German license is a gray area and is subject to ongoing adjustments by the GGL (Joint Gambling Authority of the Federal States). Players themselves are responsible for compliance with local regulations.